Tenda
Tenda Ac21 Firmware: vulnerabilidades y CVE
Tenda Ac21 Firmware tiene 29 vulnerabilidades publicadas, 13 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE29
Últimos 12 meses13
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-4565 | Alta (7.4) | 0.98% | — | 23 mar 2026 | A vulnerability was detected in Tenda AC21 16.03.08.16. Impacted is the function formSetQosBand of the file /goform/SetNetControlList. Performing a manipulation of the argument list results in buffer overflow. The… |
| CVE-2026-2148 | Media (5.5) | 0.58% | — | 8 feb 2026 | A security vulnerability has been detected in Tenda AC21 16.03.08.16. Affected is an unknown function of the file /cgi-bin/DownloadFlash of the component Web Management Interface. The manipulation leads to information… |
| CVE-2026-2147 | Media (5.5) | 0.55% | — | 8 feb 2026 | A weakness has been identified in Tenda AC21 16.03.08.16. This impacts an unknown function of the file /cgi-bin/DownloadLog of the component Web Management Interface. Executing a manipulation can lead to information… |
| CVE-2026-1638 | Baja (2.1) | 2.2% | — | 30 ene 2026 | A security flaw has been discovered in Tenda AC21 1.1.1.1/1.dmzip/16.03.08.16. The impacted element is the function mDMZSetCfg of the file /goform/mDMZSetCfg. The manipulation of the argument dmzIp results in command… |
| CVE-2026-1637 | Alta (7.4) | 0.71% | — | 29 ene 2026 | A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function fromAdvSetMacMtuWan of the file /goform/AdvSetMacMtuWan. The manipulation leads to stack-based buffer overflow. Remote… |
| CVE-2025-65226 | Media (4.3) | 0.24% | — | 20 nov 2025 | Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the deviceId parameter in /goform/saveParentControlInfo. |
| CVE-2025-65223 | Media (4.3) | 0.29% | — | 20 nov 2025 | Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the urls parameter of /goform/saveParentControlInfo. |
| CVE-2025-65222 | Media (4.3) | 2.4% | — | 20 nov 2025 | Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the rebootTime parameter of /goform/SetSysAutoRebbotCfg. |
| CVE-2025-65221 | Media (4.3) | 0.29% | — | 20 nov 2025 | Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the list parameter of /goform/setPptpUserList. |
| CVE-2025-65220 | Media (4.3) | 0.25% | — | 20 nov 2025 | Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow in: /goform/SetVirtualServerCfg via the list parameter. |
| CVE-2025-13446 | Alta (7.4) | 3.9% | — | 20 nov 2025 | A vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/SetSysTimeCfg. The manipulation of the argument timeZone/time leads to stack-based buffer overflow.… |
| CVE-2025-13445 | Alta (7.4) | 3.9% | — | 20 nov 2025 | A flaw has been found in Tenda AC21 16.03.08.16. This affects an unknown part of the file /goform/SetIpMacBind. Executing a manipulation of the argument list can lead to stack-based buffer overflow. The attack can be… |
| CVE-2025-12611 | Alta (7.4) | 0.74% | — | 3 nov 2025 | A vulnerability was identified in Tenda AC21 16.03.08.16. This vulnerability affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument startIp leads to buffer… |
| CVE-2025-11091 | Alta (7.4) | 0.74% | — | 28 sept 2025 | A security flaw has been discovered in Tenda AC21 up to 16.03.08.16. Affected by this vulnerability is the function sscanf of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer… |
| CVE-2025-10838 | Alta (7.4) | 1.0% | — | 23 sept 2025 | A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function sub_45BB10 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to buffer overflow. It is… |
| CVE-2025-9605 | Alta (8.9) | 5.1% | — | 29 ago 2025 | A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. Such manipulation of the argument mac leads to… |
| CVE-2023-24333 | Alta (8.8) | 0.47% | — | 21 feb 2024 | A stack overflow vulnerability in Tenda AC21 with firmware version US_AC21V1.0re_V16.03.08.15_cn_TDC01 allows attackers to run arbitrary commands via crafted POST request to /goform/openSchedWifi. |
| CVE-2022-44163 | Alta (7.5) | 0.85% | — | 21 nov 2022 | Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function formSetMacFilterCfg. |
| CVE-2022-44158 | Alta (7.5) | 0.85% | — | 21 nov 2022 | Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via function via set_device_name. |
| CVE-2022-40076 | Alta (7.5) | 0.99% | — | 19 sept 2022 | Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetWifiGusetBasic. |
| CVE-2022-40075 | Alta (7.5) | 0.99% | — | 19 sept 2022 | Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, form_fast_setting_wifi_set. |
| CVE-2022-40074 | Alta (7.5) | 0.99% | — | 19 sept 2022 | Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, setSchedWifi. |
| CVE-2022-40073 | Alta (7.5) | 0.99% | — | 19 sept 2022 | Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, saveParentControlInfo. |
| CVE-2022-40072 | Alta (7.5) | 0.99% | — | 19 sept 2022 | Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: setSmartPowerManagement. |
| CVE-2022-40071 | Alta (7.5) | 0.99% | — | 19 sept 2022 | Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formSetDeviceName. |
| CVE-2022-40070 | Alta (7.5) | 0.99% | — | 19 sept 2022 | Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via bin/httpd, function: formSetFirewallCfg. |
| CVE-2022-40069 | Alta (7.5) | 0.99% | — | 19 sept 2022 | ]Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: fromSetSysTime. |
| CVE-2022-40068 | Alta (7.5) | 0.99% | — | 19 sept 2022 | Tenda AC21 V16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetQosBand. |
| CVE-2022-40067 | Alta (7.5) | 0.99% | — | 19 sept 2022 | Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, function: formSetVirtualSer. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.